home

Tribot.2016.exe

Tribot Inc

Publisher:
Tribot Inc

Description:
Tribot

Version:
1.0.0.0.

MD5:
e812cbbf142498a07e1e9c7c361ce0bc

SHA-1:
26671ba177298d61480c6d773bb31359f8f24196

SHA-256:
41fc60eb2af5745b63bf2bda3626efd498d02e5bf98857155eac125353a2b0e6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 1:40:21 PM UTC  (today)

File size:
95 MB (99,614,720 bytes)

Product version:
1.0.0.0.

Copyright:
Tribot Inc

Trademarks:
Tribot Inc

Original file name:
Tribot.2016.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\tribot.2016.exe

File PE Metadata
Compilation timestamp:
2/18/2016 12:58:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:mxeUnYFmR+RsUDOr319DgDvlme082YiSMxx:UnJRqQ7DgDvlme0NYiJD

Entry address:
0x38F9E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 00, 00, 03, 00, 03, 00, 00, 00, 28, 00, 00, 80, 0E, 00, 00, 00, 50, 00...
 
[+]

Entropy:
0.0339

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
220 KB (225,280 bytes)

The file Tribot.2016.exe has been seen being distributed by the following 4 URLs.

http://download1823.mediafire.com/4ih78wlbt9bg/.../Tribot.2016.exe

https://fs03n4.sendspace.com/dl/ed496381c9b4be7c7b3d2f625ad47aac/57c1444938142df6/.../Tribot.2016.exe

https://fs03n5.sendspace.com/dl/a9a77680315901583b2561fe627da177/5767fb9c718f920c/.../Tribot.2016.exe

https://fs03n4.sendspace.com/dl/7693c6ef2a2257beb57e211ea340a4b3/56ccf5af2aedb098/.../Tribot.2016.exe

Scan Tribot.2016.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.